{"answers":{"affected":"It affects 388 products.","exploited":"There is no known exploitation of CVE-2024-0158 in the wild and no public exploit code.","fix":"No fix has been published for CVE-2024-0158 yet. Limit exposure of the affected software until one is available.","what":"CVE-2024-0158 is a medium-severity vulnerability in Dell Chengming 3990 Firmware, published on 2 Jul 2024. It can only be exploited from the same machine or local network, with no action from the victim."},"fix_prompt":"Check this codebase for CVE-2024-0158 and fix it if it is affected.\n\nWhat it is: CVE-2024-0158 is a medium-severity vulnerability in Dell Chengming 3990 Firmware, published on 2 Jul 2024. It can only be exploited from the same machine or local network, with no action from the victim.\nExploitation: There is no known exploitation of CVE-2024-0158 in the wild and no public exploit code.\n\nAffected product: Dell Chengming 3990 Firmware. No package-level version data is available, so check the vendor advisory linked from the reference page.\n\nTask:\n1. Search the dependency manifests and lockfiles (for example package.json, package-lock.json, requirements.txt, poetry.lock, uv.lock, pom.xml, build.gradle, go.mod, Cargo.lock, Gemfile.lock) and any Dockerfiles for the affected packages, including transitive dependencies.\n2. If an affected version is in use, upgrade it to the fixed version for its release line with the project's package manager, so the lockfile is regenerated. Prefer the smallest upgrade that fixes it.\n3. If there is no fix, or the upgrade would break the build, do not guess: explain the risk and the safest workaround instead.\n4. Run the tests and summarise what changed and why.\n5. If nothing in the project is affected, say so and change nothing.\n\nReference: https://insights.sbomify.com/CVE-2024-0158/ (Markdown: https://insights.sbomify.com/CVE-2024-0158/index.md)","id":"CVE-2024-0158","markdown":"https://insights.sbomify.com/CVE-2024-0158/index.md","name":"CVE-2024-0158","record":{"aliases":["GHSA-w975-rg3f-5xr9"],"analysis":{"component_type":"hardware_firmware","fix_type":"patch","impacts":["privilege_escalation","denial_of_service"],"network_reachable":"adjacent_or_local","non_default_config":false,"product_category":"Dell BIOS","requires_auth":"high_privilege","summary":"A local authenticated attacker with admin privileges can modify UEFI variables in Dell BIOS, causing denial of service and privilege escalation.","user_interaction":"not_required","vuln_class":"privilege_escalation"},"analysis_generated_by":"qwen3.8-flash-next","assigner":"dell","cpe":[{"product":"alienware_m15_r6_firmware","vendor":"dell"},{"product":"alienware_m15_r7_firmware","vendor":"dell"},{"product":"alienware_m16_r1_firmware","vendor":"dell"},{"product":"alienware_m18_r1_firmware","vendor":"dell"},{"product":"alienware_m18_r2_firmware","vendor":"dell"},{"product":"alienware_x14_r2_firmware","vendor":"dell"},{"product":"alienware_x16_r1_firmware","vendor":"dell"},{"product":"alienware_x16_r2_firmware","vendor":"dell"},{"product":"chengming_3900_firmware","vendor":"dell"},{"product":"chengming_3910_firmware","vendor":"dell"},{"product":"chengming_3911_firmware","vendor":"dell"},{"product":"chengming_3990_firmware","vendor":"dell"},{"product":"chengming_3991_firmware","vendor":"dell"},{"product":"edge_gateway_3000_firmware","vendor":"dell"},{"product":"edge_gateway_5000_firmware","vendor":"dell"},{"product":"embedded_box_pc_3000_firmware","vendor":"dell"},{"product":"embedded_box_pc_5000_firmware","vendor":"dell"},{"product":"g15_5510_firmware","vendor":"dell"},{"product":"g15_5511_firmware","vendor":"dell"},{"product":"g15_5520_firmware","vendor":"dell"},{"product":"g15_5530_firmware","vendor":"dell"},{"product":"g16_7620_firmware","vendor":"dell"},{"product":"g16_7630_firmware","vendor":"dell"},{"product":"g3_3500_firmware","vendor":"dell"},{"product":"g5_5000_firmware","vendor":"dell"},{"product":"g5_5090_firmware","vendor":"dell"},{"product":"g5_5500_firmware","vendor":"dell"},{"product":"g7_7500_firmware","vendor":"dell"},{"product":"g7_7700_firmware","vendor":"dell"},{"product":"inspiron_13_5310_firmware","vendor":"dell"},{"product":"inspiron_13_5320_firmware","vendor":"dell"},{"product":"inspiron_13_5330_firmware","vendor":"dell"},{"product":"inspiron_14_5410_firmware","vendor":"dell"},{"product":"inspiron_14_5418_firmware","vendor":"dell"},{"product":"inspiron_14_5420_firmware","vendor":"dell"},{"product":"inspiron_14_5430_firmware","vendor":"dell"},{"product":"inspiron_14_5440_firmware","vendor":"dell"},{"product":"inspiron_14_7420_2-in-1_firmware","vendor":"dell"},{"product":"inspiron_14_7430_2-in-1_firmware","vendor":"dell"},{"product":"inspiron_14_7440_2-in-1_firmware","vendor":"dell"},{"product":"inspiron_14_plus_7420_firmware","vendor":"dell"},{"product":"inspiron_14_plus_7430_firmware","vendor":"dell"},{"product":"inspiron_15_3511_firmware","vendor":"dell"},{"product":"inspiron_15_3520_firmware","vendor":"dell"},{"product":"inspiron_15_3530_firmware","vendor":"dell"},{"product":"inspiron_15_5510_firmware","vendor":"dell"},{"product":"inspiron_15_5518_firmware","vendor":"dell"},{"product":"inspiron_15_7510_firmware","vendor":"dell"},{"product":"inspiron_16_5620_firmware","vendor":"dell"},{"product":"inspiron_16_5630_firmware","vendor":"dell"},{"product":"inspiron_16_5640_firmware","vendor":"dell"},{"product":"inspiron_16_7610_firmware","vendor":"dell"},{"product":"inspiron_16_7620_2-in-1_firmware","vendor":"dell"},{"product":"inspiron_16_7630_2-in-1_firmware","vendor":"dell"},{"product":"inspiron_16_plus_7620_firmware","vendor":"dell"},{"product":"inspiron_16_plus_7630_firmware","vendor":"dell"},{"product":"inspiron_24_5410_all-in-one_firmware","vendor":"dell"},{"product":"inspiron_24_5411_all-in-one_firmware","vendor":"dell"},{"product":"inspiron_24_5420_all-in-one_firmware","vendor":"dell"},{"product":"inspiron_27_7710_all-in-one_firmware","vendor":"dell"},{"product":"inspiron_27_7720_all-in-one_firmware","vendor":"dell"},{"product":"inspiron_3020_desktop_firmware","vendor":"dell"},{"product":"inspiron_3020_small_desktop_firmware","vendor":"dell"},{"product":"inspiron_3030s_firmware","vendor":"dell"},{"product":"inspiron_3480_firmware","vendor":"dell"},{"product":"inspiron_3493_firmware","vendor":"dell"},{"product":"inspiron_3501_firmware","vendor":"dell"},{"product":"inspiron_3580_firmware","vendor":"dell"},{"product":"inspiron_3593_firmware","vendor":"dell"},{"product":"inspiron_3793_firmware","vendor":"dell"},{"product":"inspiron_3880_firmware","vendor":"dell"},{"product":"inspiron_3881_firmware","vendor":"dell"},{"product":"inspiron_3891_firmware","vendor":"dell"},{"product":"inspiron_3910_firmware","vendor":"dell"},{"product":"inspiron_5301_firmware","vendor":"dell"},{"product":"inspiron_5400_firmware","vendor":"dell"},{"product":"inspiron_5401_aio_firmware","vendor":"dell"},{"product":"inspiron_5401_firmware","vendor":"dell"},{"product":"inspiron_5402_firmware","vendor":"dell"},{"product":"inspiron_5406_2-in-1_firmware","vendor":"dell"},{"product":"inspiron_5409_firmware","vendor":"dell"},{"product":"inspiron_5410_firmware","vendor":"dell"},{"product":"inspiron_5493_firmware","vendor":"dell"},{"product":"inspiron_5502_firmware","vendor":"dell"},{"product":"inspiron_5509_firmware","vendor":"dell"},{"product":"inspiron_5593_firmware","vendor":"dell"},{"product":"inspiron_7300_firmware","vendor":"dell"},{"product":"inspiron_7306_2-in-1_firmware","vendor":"dell"},{"product":"inspiron_7400_firmware","vendor":"dell"},{"product":"inspiron_7490_firmware","vendor":"dell"},{"product":"inspiron_7500_firmware","vendor":"dell"},{"product":"inspiron_7501_firmware","vendor":"dell"},{"product":"inspiron_7506_2-in-1_firmware","vendor":"dell"},{"product":"inspiron_7700_all-in-one_firmware","vendor":"dell"},{"product":"inspiron_7706_2-in-1_firmware","vendor":"dell"},{"product":"latitude_12_rugged_extreme_7214_firmware","vendor":"dell"},{"product":"latitude_3120_firmware","vendor":"dell"},{"product":"latitude_3140_firmware","vendor":"dell"},{"product":"latitude_3180_firmware","vendor":"dell"},{"product":"latitude_3189_firmware","vendor":"dell"},{"product":"latitude_3190_2-in-1_firmware","vendor":"dell"},{"product":"latitude_3190_firmware","vendor":"dell"},{"product":"latitude_3300_firmware","vendor":"dell"},{"product":"latitude_3301_firmware","vendor":"dell"},{"product":"latitude_3310_2-in-1_firmware","vendor":"dell"},{"product":"latitude_3310_firmware","vendor":"dell"},{"product":"latitude_3320_firmware","vendor":"dell"},{"product":"latitude_3330_firmware","vendor":"dell"},{"product":"latitude_3340_firmware","vendor":"dell"},{"product":"latitude_3380_firmware","vendor":"dell"},{"product":"latitude_3390_2-in-1_firmware","vendor":"dell"},{"product":"latitude_3400_firmware","vendor":"dell"},{"product":"latitude_3410_firmware","vendor":"dell"},{"product":"latitude_3420_firmware","vendor":"dell"},{"product":"latitude_3430_firmware","vendor":"dell"},{"product":"latitude_3440_firmware","vendor":"dell"},{"product":"latitude_3500_firmware","vendor":"dell"},{"product":"latitude_3510_firmware","vendor":"dell"},{"product":"latitude_3520_firmware","vendor":"dell"},{"product":"latitude_3530_firmware","vendor":"dell"},{"product":"latitude_3540_firmware","vendor":"dell"},{"product":"latitude_5280_firmware","vendor":"dell"},{"product":"latitude_5288_firmware","vendor":"dell"},{"product":"latitude_5290_2-in-1_firmware","vendor":"dell"},{"product":"latitude_5290_firmware","vendor":"dell"},{"product":"latitude_5300_2-in-1_firmware","vendor":"dell"},{"product":"latitude_5300_firmware","vendor":"dell"},{"product":"latitude_5310_2-in-1_firmware","vendor":"dell"},{"product":"latitude_5310_firmware","vendor":"dell"},{"product":"latitude_5320_firmware","vendor":"dell"},{"product":"latitude_5330_firmware","vendor":"dell"},{"product":"latitude_5340_firmware","vendor":"dell"},{"product":"latitude_5400_firmware","vendor":"dell"},{"product":"latitude_5401_firmware","vendor":"dell"},{"product":"latitude_5410_firmware","vendor":"dell"},{"product":"latitude_5411_firmware","vendor":"dell"},{"product":"latitude_5414_rugged_firmware","vendor":"dell"},{"product":"latitude_5420_firmware","vendor":"dell"},{"product":"latitude_5420_rugged_firmware","vendor":"dell"},{"product":"latitude_5421_firmware","vendor":"dell"},{"product":"latitude_5424_rugged_firmware","vendor":"dell"},{"product":"latitude_5430_firmware","vendor":"dell"},{"product":"latitude_5430_rugged_firmware","vendor":"dell"},{"product":"latitude_5431_firmware","vendor":"dell"},{"product":"latitude_5440_firmware","vendor":"dell"},{"product":"latitude_5480_firmware","vendor":"dell"},{"product":"latitude_5488_firmware","vendor":"dell"},{"product":"latitude_5490_firmware","vendor":"dell"},{"product":"latitude_5491_firmware","vendor":"dell"},{"product":"latitude_5495_firmware","vendor":"dell"},{"product":"latitude_5500_firmware","vendor":"dell"},{"product":"latitude_5501_firmware","vendor":"dell"},{"product":"latitude_5510_firmware","vendor":"dell"},{"product":"latitude_5511_firmware","vendor":"dell"},{"product":"latitude_5520_firmware","vendor":"dell"},{"product":"latitude_5521_firmware","vendor":"dell"},{"product":"latitude_5530_firmware","vendor":"dell"},{"product":"latitude_5531_firmware","vendor":"dell"},{"product":"latitude_5540_firmware","vendor":"dell"},{"product":"latitude_5580_firmware","vendor":"dell"},{"product":"latitude_5590_firmware","vendor":"dell"},{"product":"latitude_5591_firmware","vendor":"dell"},{"product":"latitude_7030_rugged_extreme_firmware","vendor":"dell"},{"product":"latitude_7200_2-in-1_firmware","vendor":"dell"},{"product":"latitude_7210_2-in-1_firmware","vendor":"dell"},{"product":"latitude_7212_rugged_extreme_tablet_firmware","vendor":"dell"},{"product":"latitude_7220_rugged_extreme_firmware","vendor":"dell"},{"product":"latitude_7230_rugged_extreme_firmware","vendor":"dell"},{"product":"latitude_7280_firmware","vendor":"dell"},{"product":"latitude_7285_2-in-1_firmware","vendor":"dell"},{"product":"latitude_7290_firmware","vendor":"dell"},{"product":"latitude_7300_firmware","vendor":"dell"},{"product":"latitude_7310_firmware","vendor":"dell"},{"product":"latitude_7320_detachable_firmware","vendor":"dell"},{"product":"latitude_7320_firmware","vendor":"dell"},{"product":"latitude_7330_firmware","vendor":"dell"},{"product":"latitude_7330_rugged_laptop_firmware","vendor":"dell"},{"product":"latitude_7340_firmware","vendor":"dell"},{"product":"latitude_7380_firmware","vendor":"dell"},{"product":"latitude_7390_2-in-1_firmware","vendor":"dell"},{"product":"latitude_7390_firmware","vendor":"dell"},{"product":"latitude_7400_2-in-1_firmware","vendor":"dell"},{"product":"latitude_7400_firmware","vendor":"dell"},{"product":"latitude_7410_firmware","vendor":"dell"},{"product":"latitude_7414_rugged_firmware","vendor":"dell"},{"product":"latitude_7420_firmware","vendor":"dell"},{"product":"latitude_7424_rugged_extreme_firmware","vendor":"dell"},{"product":"latitude_7430_firmware","vendor":"dell"},{"product":"latitude_7440_firmware","vendor":"dell"},{"product":"latitude_7480_firmware","vendor":"dell"},{"product":"latitude_7490_firmware","vendor":"dell"},{"product":"latitude_7520_firmware","vendor":"dell"},{"product":"latitude_7530_firmware","vendor":"dell"},{"product":"latitude_7640_firmware","vendor":"dell"},{"product":"latitude_9330_firmware","vendor":"dell"},{"product":"latitude_9410_firmware","vendor":"dell"},{"product":"latitude_9420_firmware","vendor":"dell"},{"product":"latitude_9430_firmware","vendor":"dell"},{"product":"latitude_9440_2-in-1_firmware","vendor":"dell"},{"product":"latitude_9510_2in1_firmware","vendor":"dell"},{"product":"latitude_9520_firmware","vendor":"dell"},{"product":"latitude_rugged_7220ex_firmware","vendor":"dell"},{"product":"optiplex_3000_micro_firmware","vendor":"dell"},{"product":"optiplex_3000_small_form_factor_firmware","vendor":"dell"},{"product":"optiplex_3000_thin_client_firmware","vendor":"dell"},{"product":"optiplex_3000_tower_firmware","vendor":"dell"},{"product":"optiplex_3050_all-in-one_firmware","vendor":"dell"},{"product":"optiplex_3050_firmware","vendor":"dell"},{"product":"optiplex_3060_firmware","vendor":"dell"},{"product":"optiplex_3070_firmware","vendor":"dell"},{"product":"optiplex_3080_firmware","vendor":"dell"},{"product":"optiplex_3090_firmware","vendor":"dell"},{"product":"optiplex_3090_ultra_firmware","vendor":"dell"},{"product":"optiplex_3280_all-in-one_firmware","vendor":"dell"},{"product":"optiplex_5000_micro_firmware","vendor":"dell"},{"product":"optiplex_5000_small_form_factor_firmware","vendor":"dell"},{"product":"optiplex_5000_tower_firmware","vendor":"dell"},{"product":"optiplex_5050_firmware","vendor":"dell"},{"product":"optiplex_5055_a-serial_firmware","vendor":"dell"},{"product":"optiplex_5055_ryzen_apu_firmware","vendor":"dell"},{"product":"optiplex_5055_ryzen_cpu_firmware","vendor":"dell"},{"product":"optiplex_5060_firmware","vendor":"dell"},{"product":"optiplex_5070_firmware","vendor":"dell"},{"product":"optiplex_5080_firmware","vendor":"dell"},{"product":"optiplex_5090_micro_firmware","vendor":"dell"},{"product":"optiplex_5090_small_form_factor_firmware","vendor":"dell"},{"product":"optiplex_5090_tower_firmware","vendor":"dell"},{"product":"optiplex_5260_all-in-one_firmware","vendor":"dell"},{"product":"optiplex_5270_all-in-one_firmware","vendor":"dell"},{"product":"optiplex_5400_all-in-one_firmware","vendor":"dell"},{"product":"optiplex_5480_all-in-one_firmware","vendor":"dell"},{"product":"optiplex_5490_all-in-one_firmware","vendor":"dell"},{"product":"optiplex_7000_micro_firmware","vendor":"dell"},{"product":"optiplex_7000_small_form_factor_firmware","vendor":"dell"},{"product":"optiplex_7000_tower_firmware","vendor":"dell"},{"product":"optiplex_7000_xe_micro_firmware","vendor":"dell"},{"product":"optiplex_7060_firmware","vendor":"dell"},{"product":"optiplex_7070_firmware","vendor":"dell"},{"product":"optiplex_7070_ultra_firmware","vendor":"dell"},{"product":"optiplex_7071_firmware","vendor":"dell"},{"product":"optiplex_7080_firmware","vendor":"dell"},{"product":"optiplex_7090_tower_firmware","vendor":"dell"},{"product":"optiplex_7090_ultra_firmware","vendor":"dell"},{"product":"optiplex_7400_all-in-one_firmware","vendor":"dell"},{"product":"optiplex_7450_all-in-one_firmware","vendor":"dell"},{"product":"optiplex_7460_all_in_one_firmware","vendor":"dell"},{"product":"optiplex_7470_all-in-one_firmware","vendor":"dell"},{"product":"optiplex_7480_all-in-one_firmware","vendor":"dell"},{"product":"optiplex_7490_all-in-one_firmware","vendor":"dell"},{"product":"optiplex_7760_all-in-one_firmware","vendor":"dell"},{"product":"optiplex_7770_all-in-one_firmware","vendor":"dell"},{"product":"optiplex_7780_all-in-one_firmware","vendor":"dell"},{"product":"optiplex_all-in-one_7410_firmware","vendor":"dell"},{"product":"optiplex_micro_7010_firmware","vendor":"dell"},{"product":"optiplex_micro_plus_7010_firmware","vendor":"dell"},{"product":"optiplex_small_form_factor_7010_firmware","vendor":"dell"},{"product":"optiplex_small_form_factor_plus_7010_firmware","vendor":"dell"},{"product":"optiplex_tower_7010_firmware","vendor":"dell"},{"product":"optiplex_tower_plus_7010_firmware","vendor":"dell"},{"product":"optiplex_xe3_firmware","vendor":"dell"},{"product":"optiplex_xe4_tower_firmware","vendor":"dell"},{"product":"precision_3240_compact_firmware","vendor":"dell"},{"product":"precision_3260_compact_firmware","vendor":"dell"},{"product":"precision_3260_xe_compact_firmware","vendor":"dell"},{"product":"precision_3420_tower_firmware","vendor":"dell"},{"product":"precision_3430_tower_firmware","vendor":"dell"},{"product":"precision_3431_tower_firmware","vendor":"dell"},{"product":"precision_3440_firmware","vendor":"dell"},{"product":"precision_3450_firmware","vendor":"dell"},{"product":"precision_3460_small_form_factor_firmware","vendor":"dell"},{"product":"precision_3460_xe_small_form_factor_firmware","vendor":"dell"},{"product":"precision_3470_firmware","vendor":"dell"},{"product":"precision_3480_firmware","vendor":"dell"},{"product":"precision_3520_firmware","vendor":"dell"},{"product":"precision_3530_firmware","vendor":"dell"},{"product":"precision_3540_firmware","vendor":"dell"},{"product":"precision_3541_firmware","vendor":"dell"},{"product":"precision_3550_firmware","vendor":"dell"},{"product":"precision_3551_firmware","vendor":"dell"},{"product":"precision_3560_firmware","vendor":"dell"},{"product":"precision_3561_firmware","vendor":"dell"},{"product":"precision_3570_firmware","vendor":"dell"},{"product":"precision_3571_firmware","vendor":"dell"},{"product":"precision_3580_firmware","vendor":"dell"},{"product":"precision_3581_firmware","vendor":"dell"},{"product":"precision_3620_tower_firmware","vendor":"dell"},{"product":"precision_3630_tower_firmware","vendor":"dell"},{"product":"precision_3640_firmware","vendor":"dell"},{"product":"precision_3650_tower_firmware","vendor":"dell"},{"product":"precision_3660_firmware","vendor":"dell"},{"product":"precision_3930_rack_firmware","vendor":"dell"},{"product":"precision_5470_firmware","vendor":"dell"},{"product":"precision_5480_firmware","vendor":"dell"},{"product":"precision_5520_firmware","vendor":"dell"},{"product":"precision_5530_2-in-1_firmware","vendor":"dell"},{"product":"precision_5530_firmware","vendor":"dell"},{"product":"precision_5540_firmware","vendor":"dell"},{"product":"precision_5550_firmware","vendor":"dell"},{"product":"precision_5560_firmware","vendor":"dell"},{"product":"precision_5570_firmware","vendor":"dell"},{"product":"precision_5680_firmware","vendor":"dell"},{"product":"precision_5750_firmware","vendor":"dell"},{"product":"precision_5760_firmware","vendor":"dell"},{"product":"precision_5770_firmware","vendor":"dell"},{"product":"precision_5820_tower_firmware","vendor":"dell"},{"product":"precision_5860_tower_firmware","vendor":"dell"},{"product":"precision_7520_firmware","vendor":"dell"},{"product":"precision_7530_firmware","vendor":"dell"},{"product":"precision_7540_firmware","vendor":"dell"},{"product":"precision_7550_firmware","vendor":"dell"},{"product":"precision_7560_firmware","vendor":"dell"},{"product":"precision_7670_firmware","vendor":"dell"},{"product":"precision_7680_firmware","vendor":"dell"},{"product":"precision_7720_firmware","vendor":"dell"},{"product":"precision_7730_firmware","vendor":"dell"},{"product":"precision_7740_firmware","vendor":"dell"},{"product":"precision_7750_firmware","vendor":"dell"},{"product":"precision_7760_firmware","vendor":"dell"},{"product":"precision_7770_firmware","vendor":"dell"},{"product":"precision_7780_firmware","vendor":"dell"},{"product":"precision_7820_tower_firmware","vendor":"dell"},{"product":"precision_7865_tower_firmware","vendor":"dell"},{"product":"precision_7875_tower_firmware","vendor":"dell"},{"product":"precision_7920_tower_firmware","vendor":"dell"},{"product":"precision_7960_tower_firmware","vendor":"dell"},{"product":"vostro_13_5310_firmware","vendor":"dell"},{"product":"vostro_14_3420_firmware","vendor":"dell"},{"product":"vostro_14_3430_firmware","vendor":"dell"},{"product":"vostro_14_3440_firmware","vendor":"dell"},{"product":"vostro_14_5410_firmware","vendor":"dell"},{"product":"vostro_15_3510_firmware","vendor":"dell"},{"product":"vostro_15_3520_firmware","vendor":"dell"},{"product":"vostro_15_3530_firmware","vendor":"dell"},{"product":"vostro_15_5510_firmware","vendor":"dell"},{"product":"vostro_15_7510_firmware","vendor":"dell"},{"product":"vostro_16_5630_firmware","vendor":"dell"},{"product":"vostro_16_5640_firmware","vendor":"dell"},{"product":"vostro_3020_small_desktop_firmware","vendor":"dell"},{"product":"vostro_3020_tower_desktop_firmware","vendor":"dell"},{"product":"vostro_3030s_firmware","vendor":"dell"},{"product":"vostro_3400_firmware","vendor":"dell"},{"product":"vostro_3401_firmware","vendor":"dell"},{"product":"vostro_3480_firmware","vendor":"dell"},{"product":"vostro_3500_firmware","vendor":"dell"},{"product":"vostro_3501_firmware","vendor":"dell"},{"product":"vostro_3580_firmware","vendor":"dell"},{"product":"vostro_3583_firmware","vendor":"dell"},{"product":"vostro_3590_firmware","vendor":"dell"},{"product":"vostro_3681_firmware","vendor":"dell"},{"product":"vostro_3690_firmware","vendor":"dell"},{"product":"vostro_3710_firmware","vendor":"dell"},{"product":"vostro_3881_firmware","vendor":"dell"},{"product":"vostro_3888_firmware","vendor":"dell"},{"product":"vostro_3890_firmware","vendor":"dell"},{"product":"vostro_3910_firmware","vendor":"dell"},{"product":"vostro_5090_firmware","vendor":"dell"},{"product":"vostro_5301_firmware","vendor":"dell"},{"product":"vostro_5320_firmware","vendor":"dell"},{"product":"vostro_5402_firmware","vendor":"dell"},{"product":"vostro_5502_firmware","vendor":"dell"},{"product":"vostro_5620_firmware","vendor":"dell"},{"product":"vostro_5880_firmware","vendor":"dell"},{"product":"vostro_5890_firmware","vendor":"dell"},{"product":"vostro_7500_firmware","vendor":"dell"},{"product":"vostro_7620_firmware","vendor":"dell"},{"product":"wyse_5070_firmware","vendor":"dell"},{"product":"wyse_5470_all-in-one_firmware","vendor":"dell"},{"product":"wyse_5470_firmware","vendor":"dell"},{"product":"wyse_7040_thin_client_firmware","vendor":"dell"},{"product":"xps_13_7390_2-in-1_firmware","vendor":"dell"},{"product":"xps_13_7390_firmware","vendor":"dell"},{"product":"xps_13_9300_firmware","vendor":"dell"},{"product":"xps_13_9305_firmware","vendor":"dell"},{"product":"xps_13_9310_2-in-1_firmware","vendor":"dell"},{"product":"xps_13_9310_firmware","vendor":"dell"},{"product":"xps_13_9315_firmware","vendor":"dell"},{"product":"xps_13_plus_9320_firmware","vendor":"dell"},{"product":"xps_15_7590_firmware","vendor":"dell"},{"product":"xps_15_9500_firmware","vendor":"dell"},{"product":"xps_15_9510_firmware","vendor":"dell"},{"product":"xps_15_9520_firmware","vendor":"dell"},{"product":"xps_15_9530_firmware","vendor":"dell"},{"product":"xps_17_9700_firmware","vendor":"dell"},{"product":"xps_17_9710_firmware","vendor":"dell"},{"product":"xps_17_9720_firmware","vendor":"dell"},{"product":"xps_17_9730_firmware","vendor":"dell"},{"product":"xps_8940_firmware","vendor":"dell"},{"product":"xps_9315_2-in-1_firmware","vendor":"dell"}],"cvss":{"score":5.1,"severity":"medium","source":"cna","vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:L","version":"3.1"},"cwes":[{"id":"CWE-20","name":"Improper Input Validation"}],"description":"Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with admin privileges may potentially exploit this vulnerability to modify a UEFI variable, leading to denial of service and escalation of privileges","ecosystems":[],"exploits":{"exploitdb":0,"first_seen":null,"github_poc":0,"max_poc_stars":null,"metasploit":0,"nuclei":0,"refs":[],"tier":"none_known"},"has_fix":null,"headline":"Privilege escalation in CPG BIOS","id":"CVE-2024-0158","indexable":true,"kev":null,"kind":"cve","links":{"ecosystem":null,"product":"dell:chengming_3990_firmware","products":["dell:chengming_3990_firmware","dell:chengming_3991_firmware","dell:embedded_box_pc_5000_firmware","dell:g5_5000_firmware","dell:inspiron_3480_firmware","dell:inspiron_3493_firmware","dell:inspiron_3501_firmware","dell:inspiron_3580_firmware","dell:inspiron_3593_firmware","dell:inspiron_3793_firmware","dell:inspiron_3880_firmware","dell:inspiron_3881_firmware","dell:inspiron_3891_firmware","dell:inspiron_5400_firmware","dell:inspiron_5401_firmware","dell:inspiron_5493_firmware","dell:inspiron_5593_firmware","dell:inspiron_7490_firmware","dell:inspiron_7500_firmware","dell:inspiron_7501_firmware","dell:latitude_3120_firmware","dell:latitude_3180_firmware","dell:latitude_3189_firmware","dell:latitude_3190_2-in-1_firmware","dell:latitude_3190_firmware","dell:latitude_3300_firmware","dell:latitude_3301_firmware","dell:latitude_3310_2-in-1_firmware","dell:latitude_3310_firmware","dell:latitude_3320_firmware","dell:latitude_3420_firmware","dell:latitude_3520_firmware","dell:latitude_5280_firmware","dell:latitude_5290_2-in-1_firmware","dell:latitude_5290_firmware","dell:latitude_5300_2-in-1_firmware","dell:latitude_5300_firmware","dell:latitude_5310_2-in-1_firmware","dell:latitude_5310_firmware","dell:latitude_5320_firmware","dell:latitude_5400_firmware","dell:latitude_5401_firmware","dell:latitude_5410_firmware","dell:latitude_5411_firmware","dell:latitude_5420_firmware","dell:latitude_5420_rugged_firmware","dell:latitude_5480_firmware","dell:latitude_5488_firmware","dell:latitude_5490_firmware","dell:latitude_5491_firmware","dell:latitude_5500_firmware","dell:latitude_5501_firmware","dell:latitude_5510_firmware","dell:latitude_5511_firmware","dell:latitude_5520_firmware","dell:latitude_5521_firmware","dell:latitude_5580_firmware","dell:latitude_5590_firmware","dell:latitude_5591_firmware","dell:latitude_7200_2-in-1_firmware","dell:latitude_7210_2-in-1_firmware","dell:latitude_7212_rugged_extreme_tablet_firmware","dell:latitude_7290_firmware","dell:latitude_7300_firmware","dell:latitude_7310_firmware","dell:latitude_7320_detachable_firmware","dell:latitude_7380_firmware","dell:latitude_7390_2-in-1_firmware","dell:latitude_7390_firmware","dell:latitude_7400_2-in-1_firmware","dell:latitude_7400_firmware","dell:latitude_7410_firmware","dell:latitude_7424_rugged_extreme_firmware","dell:latitude_7480_firmware","dell:latitude_7490_firmware","dell:latitude_9410_firmware","dell:latitude_9420_firmware","dell:latitude_9520_firmware","dell:optiplex_3050_firmware","dell:optiplex_3060_firmware","dell:optiplex_3070_firmware","dell:optiplex_3080_firmware","dell:optiplex_5050_firmware","dell:optiplex_5060_firmware","dell:optiplex_5070_firmware","dell:optiplex_5080_firmware","dell:optiplex_5480_all-in-one_firmware","dell:optiplex_7060_firmware","dell:optiplex_7070_firmware","dell:optiplex_7071_firmware","dell:optiplex_7080_firmware","dell:optiplex_7480_all-in-one_firmware","dell:optiplex_xe3_firmware","dell:precision_3440_firmware","dell:precision_3450_firmware","dell:precision_3520_firmware","dell:precision_3530_firmware","dell:precision_3540_firmware","dell:precision_3541_firmware","dell:precision_3550_firmware","dell:precision_3551_firmware","dell:precision_3560_firmware","dell:precision_3561_firmware","dell:precision_3930_rack_firmware","dell:precision_5530_2-in-1_firmware","dell:precision_5530_firmware","dell:precision_5540_firmware","dell:precision_5550_firmware","dell:precision_5760_firmware","dell:precision_5820_tower_firmware","dell:precision_7520_firmware","dell:precision_7530_firmware","dell:precision_7540_firmware","dell:precision_7560_firmware","dell:precision_7720_firmware","dell:precision_7730_firmware","dell:precision_7740_firmware","dell:precision_7760_firmware","dell:vostro_3480_firmware","dell:vostro_3501_firmware","dell:vostro_3580_firmware","dell:vostro_3583_firmware","dell:vostro_3590_firmware","dell:vostro_3681_firmware","dell:vostro_3690_firmware","dell:vostro_3881_firmware","dell:vostro_3888_firmware","dell:vostro_3890_firmware","dell:vostro_5880_firmware","dell:vostro_5890_firmware","dell:vostro_7500_firmware","dell:wyse_5070_firmware","dell:wyse_5470_firmware","dell:xps_15_7590_firmware","dell:xps_17_9710_firmware","dell:xps_8940_firmware"],"type":"privilege_escalation","year":"2024"},"n_packages":0,"n_references":1,"next":{"headline":"Missing authorization in Alienware Command Center (AWCC)","id":"CVE-2024-0159"},"packages":[],"prev":{"headline":"Auth bypass in Dell Storage Resource Manager","id":"CVE-2024-0157"},"products":["CPG BIOS"],"published":"2024-07-02","related":[{"cvss_score":8.2,"headline":"Auth bypass in Dell Client Platform BIOS","id":"CVE-2024-52541","kev_date_added":null,"published":"2025-02-19"},{"cvss_score":7.9,"headline":"Code injection in CPG BIOS","id":"CVE-2022-26861","kev_date_added":null,"published":"2022-09-06"},{"cvss_score":7.5,"headline":"Memory corruption in CPG BIOS","id":"CVE-2022-34403","kev_date_added":null,"published":"2023-02-01"},{"cvss_score":7.5,"headline":"Memory corruption in CPG BIOS","id":"CVE-2022-26860","kev_date_added":null,"published":"2022-09-06"},{"cvss_score":7.2,"headline":"Memory corruption in BIOSConnect","id":"CVE-2021-21572","kev_date_added":null,"published":"2021-06-24"},{"cvss_score":7.2,"headline":"Memory corruption in BIOSConnect","id":"CVE-2021-21573","kev_date_added":null,"published":"2021-06-24"},{"cvss_score":7.2,"headline":"Memory corruption in BIOSConnect","id":"CVE-2021-21574","kev_date_added":null,"published":"2021-06-24"}],"sources":[{"class":"attribution","licence":"CVE Terms of Use (MITRE)","name":"CVE List","prefix":"CVE"},{"class":"attribution","licence":"US public information, NVD API terms","name":"NVD"},{"class":"attribution","licence":"CWE Terms of Use","name":"CWE (MITRE)"},{"class":"attribution","licence":"FIRST CVSS licence","name":"CVSS (FIRST)"}],"ssvc":{"automatable":"no","exploitation":"none","technical_impact":"partial"},"state":"PUBLISHED","updated":"2024-08-01","vendors":["Dell"]},"summary":"A local authenticated attacker with admin privileges can modify UEFI variables in Dell BIOS, causing denial of service and privilege escalation.","url":"https://insights.sbomify.com/CVE-2024-0158/"}